Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/z2_u7U30M8rhGwvu-G5tevFBzG0.roa
File: z2_u7U30M8rhGwvu-G5tevFBzG0.roa (raw, json)
Hash identifier: pTEZw9HwDRl0+Mnyc9sTd09hPHs+NWKUWGI9E9wttZY=
Subject key identifier: CF:6F:EE:ED:4D:F4:33:CA:E1:1B:0B:EE:F8:6E:6D:7A:F1:41:CC:6D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EB836AF1E3B1FEBDF7FFB98E01D58204F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/z2_u7U30M8rhGwvu-G5tevFBzG0.roa
Signing time: Thu 11 Jun 2026 19:44:12 +0000
ROA not before: Thu 11 Jun 2026 19:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.91.239.0/24 maxlen: 24
80.242.53.0/24 maxlen: 24
84.252.71.0/24 maxlen: 24
130.193.26.0/24 maxlen: 24
146.19.87.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
186.243.132.0/24 maxlen: 24
186.243.133.0/24 maxlen: 24
186.243.134.0/24 maxlen: 24
186.243.135.0/24 maxlen: 24
186.243.136.0/24 maxlen: 24
186.243.137.0/24 maxlen: 24
186.243.138.0/24 maxlen: 24
186.243.139.0/24 maxlen: 24
186.243.140.0/24 maxlen: 24
186.243.143.0/24 maxlen: 24
186.243.146.0/24 maxlen: 24
186.243.148.0/24 maxlen: 24
186.243.152.0/24 maxlen: 24
186.243.153.0/24 maxlen: 24
186.243.154.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.157.0/24 maxlen: 24
186.243.158.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.160.0/24 maxlen: 24
186.243.161.0/24 maxlen: 24
186.243.162.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
186.243.164.0/24 maxlen: 24
186.243.165.0/24 maxlen: 24
186.243.166.0/24 maxlen: 24
186.243.167.0/24 maxlen: 24
186.243.168.0/24 maxlen: 24
186.243.169.0/24 maxlen: 24
186.243.170.0/24 maxlen: 24
186.243.171.0/24 maxlen: 24
186.243.172.0/24 maxlen: 24
186.243.173.0/24 maxlen: 24
186.243.174.0/24 maxlen: 24
186.243.175.0/24 maxlen: 24
186.243.176.0/24 maxlen: 24
186.243.177.0/24 maxlen: 24
186.243.178.0/24 maxlen: 24
186.243.179.0/24 maxlen: 24
186.243.183.0/24 maxlen: 24
186.243.184.0/24 maxlen: 24
186.243.187.0/24 maxlen: 24
186.243.188.0/24 maxlen: 24
186.243.190.0/24 maxlen: 24
186.243.193.0/24 maxlen: 24
186.243.195.0/24 maxlen: 24
186.243.196.0/24 maxlen: 24
186.243.197.0/24 maxlen: 24
186.243.199.0/24 maxlen: 24
186.243.200.0/24 maxlen: 24
186.243.204.0/24 maxlen: 24
186.243.205.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.207.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.209.0/24 maxlen: 24
186.243.210.0/24 maxlen: 24
186.243.211.0/24 maxlen: 24
186.243.212.0/24 maxlen: 24
186.243.213.0/24 maxlen: 24
186.243.214.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.243.216.0/24 maxlen: 24
186.243.217.0/24 maxlen: 24
186.243.218.0/24 maxlen: 24
186.243.219.0/24 maxlen: 24
186.243.220.0/24 maxlen: 24
186.243.221.0/24 maxlen: 24
186.243.222.0/24 maxlen: 24
186.243.223.0/24 maxlen: 24
186.243.224.0/24 maxlen: 24
186.243.225.0/24 maxlen: 24
186.243.226.0/24 maxlen: 24
186.243.227.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.230.0/24 maxlen: 24
186.243.231.0/24 maxlen: 24
186.243.232.0/24 maxlen: 24
186.243.236.0/24 maxlen: 24
186.243.238.0/24 maxlen: 24
186.243.241.0/24 maxlen: 24
186.243.243.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
186.243.245.0/24 maxlen: 24
186.243.246.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.248.0/24 maxlen: 24
186.243.249.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
186.246.59.0/24 maxlen: 24
186.246.61.0/24 maxlen: 24
186.246.62.0/24 maxlen: 24
186.246.63.0/24 maxlen: 24
186.246.64.0/24 maxlen: 24
186.246.65.0/24 maxlen: 24
186.246.66.0/24 maxlen: 24
186.246.67.0/24 maxlen: 24
186.246.68.0/24 maxlen: 24
186.246.69.0/24 maxlen: 24
186.246.70.0/24 maxlen: 24
186.246.71.0/24 maxlen: 24
186.246.73.0/24 maxlen: 24
186.246.74.0/24 maxlen: 24
186.246.78.0/24 maxlen: 24
186.246.79.0/24 maxlen: 24
186.246.81.0/24 maxlen: 24
186.246.82.0/24 maxlen: 24
186.246.83.0/24 maxlen: 24
186.246.84.0/24 maxlen: 24
186.246.85.0/24 maxlen: 24
186.246.87.0/24 maxlen: 24
186.246.88.0/24 maxlen: 24
186.246.89.0/24 maxlen: 24
186.246.90.0/24 maxlen: 24
186.246.91.0/24 maxlen: 24
186.246.92.0/24 maxlen: 24
186.246.93.0/24 maxlen: 24
186.246.94.0/24 maxlen: 24
186.246.95.0/24 maxlen: 24
186.246.96.0/24 maxlen: 24
186.246.97.0/24 maxlen: 24
186.246.98.0/24 maxlen: 24
186.246.99.0/24 maxlen: 24
186.246.101.0/24 maxlen: 24
186.246.102.0/24 maxlen: 24
186.246.105.0/24 maxlen: 24
186.246.106.0/24 maxlen: 24
186.246.110.0/24 maxlen: 24
186.246.112.0/24 maxlen: 24
186.246.113.0/24 maxlen: 24
186.246.114.0/24 maxlen: 24
186.246.115.0/24 maxlen: 24
186.246.116.0/24 maxlen: 24
186.246.117.0/24 maxlen: 24
186.246.118.0/24 maxlen: 24
186.246.119.0/24 maxlen: 24
186.246.120.0/24 maxlen: 24
186.246.121.0/24 maxlen: 24
186.246.122.0/24 maxlen: 24
186.246.126.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.105.158.0/24 maxlen: 24
194.105.159.0/24 maxlen: 24
194.156.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:36:af:1e:3b:1f:eb:df:7f:fb:98:e0:1d:58:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 11 19:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf6feeed4df433cae11b0beef86e6d7af141cc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:9c:c0:a7:a3:f7:29:de:b4:a1:10:80:53:
97:a1:ac:ea:4f:a2:c2:89:02:09:cc:0d:e3:7d:9b:
e2:98:27:a2:4e:4e:01:4b:44:5f:57:b7:e9:ed:ed:
c7:b7:6e:2e:1c:8c:1f:73:07:91:2e:95:a9:5d:62:
cf:b0:d3:bd:30:3b:74:ea:7b:58:5a:a1:c7:24:67:
e2:13:6c:48:62:ba:4a:85:a1:47:3f:48:53:91:f7:
3a:0a:01:a4:9c:73:58:92:81:d1:92:16:d3:87:2c:
50:db:f1:5f:10:e3:77:52:6e:32:b3:e8:af:97:e1:
b8:22:05:82:c2:43:9b:67:b9:88:11:f6:01:a7:cf:
50:0b:a3:de:97:9f:8b:8a:54:f6:64:31:de:6c:04:
29:ae:cc:e0:31:d2:90:0e:97:94:a2:c0:15:d2:52:
e4:e1:16:95:d5:32:f3:76:4a:88:8a:64:de:8b:2d:
0e:83:d0:d3:89:9b:9b:d7:a3:61:09:25:d8:18:cb:
61:87:ae:a4:56:7c:e0:bf:0c:10:a6:c9:26:f0:f8:
39:89:af:20:c1:2d:75:68:4d:eb:b0:50:bc:12:d6:
29:47:a7:17:c1:19:30:6d:2d:c9:2a:8b:9e:93:fa:
c2:54:aa:88:f3:80:85:de:98:9c:18:cc:0a:bf:fc:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:EE:ED:4D:F4:33:CA:E1:1B:0B:EE:F8:6E:6D:7A:F1:41:CC:6D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/z2_u7U30M8rhGwvu-G5tevFBzG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.239.0/24
80.242.53.0/24
84.252.71.0/24
130.193.26.0/24
146.19.87.0/24
146.19.129.0/24
186.243.132.0-186.243.140.255
186.243.143.0/24
186.243.146.0/24
186.243.148.0/24
186.243.152.0-186.243.154.255
186.243.156.0-186.243.179.255
186.243.183.0-186.243.184.255
186.243.187.0-186.243.188.255
186.243.190.0/24
186.243.193.0/24
186.243.195.0-186.243.197.255
186.243.199.0-186.243.200.255
186.243.204.0-186.243.227.255
186.243.229.0-186.243.232.255
186.243.236.0/24
186.243.238.0/24
186.243.241.0/24
186.243.243.0-186.243.250.255
186.246.59.0/24
186.246.61.0-186.246.71.255
186.246.73.0-186.246.74.255
186.246.78.0/23
186.246.81.0-186.246.85.255
186.246.87.0-186.246.99.255
186.246.101.0-186.246.102.255
186.246.105.0-186.246.106.255
186.246.110.0/24
186.246.112.0-186.246.122.255
186.246.126.0/24
193.176.20.0/24
193.176.22.0/24
193.201.9.0/24
194.105.158.0/23
194.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a3:a9:d5:a7:3f:51:6b:35:2f:01:90:fa:71:ba:4a:db:59:
ca:b3:7c:d8:9f:9c:3a:c2:28:78:70:5d:18:95:59:eb:f7:d9:
c0:56:f4:f4:6b:e0:8a:c7:c8:27:37:30:5c:df:00:89:e0:73:
8c:a9:cc:97:2e:54:3d:02:93:ac:51:4f:fb:3d:41:11:74:54:
2e:64:6d:90:8d:c4:e5:69:dd:a5:ca:4c:2f:9f:8e:3c:ff:67:
08:56:2f:03:1a:99:f7:b0:89:3e:0c:53:59:cb:28:6c:4c:ab:
83:1d:ae:22:f3:30:d9:7d:fb:20:bb:dc:f6:c4:16:27:3b:dc:
d3:3a:77:4f:e6:69:93:b8:12:5b:53:4e:77:cb:6d:ac:bb:30:
c7:a3:32:9a:fb:de:24:e8:34:e6:be:8e:34:b7:75:7c:55:29:
46:03:7a:b6:6e:86:4d:26:a1:a4:a2:75:9b:6b:fa:3e:96:32:
b9:d9:37:41:6e:4b:1e:1e:04:37:c9:ae:eb:4f:53:f0:0f:46:
88:25:99:f9:2f:f4:0f:39:0e:c0:b7:b5:41:c6:c6:40:6e:02:
29:2d:de:56:77:28:e3:2d:d7:42:d4:90:6f:b8:60:0f:c0:7e:
14:d9:46:92:9f:10:4a:2e:38:34:90:e8:31:58:a6:9a:3c:45:
49:09:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:58 2026 by rpki-client